CLAIMS 

11. A method of analyzing a flow for an accounting 

2 application, comprising: 

3 mapping protocol information of a first protocol type 

4 to protocol information of a second, independent protocol type 

5 for the flow; and 

6 using the results of the mapping to provide well- 

7 informed accounting information related to the flow to the 

8 accounting application. 




The method of cl>aim 1, wherein mapping comprises: 
capturing an IP p\cket from a network segment; 
determining if theVaptured IP packet includes a 
message of the first protocol Vype for providing error reporting, 
the message having an IP packet\that triggered an error event 



s 



6- embedded within, the embedded IP\packet being of the second 

fjf protocol type and having a flow associated therewith; and 

fu 

8n correlating the flow associated with the embedded IP 

packet to a stored parent flow of a c^Lven state, thereby 

10 associating the error event with the g\ven state of the stored 

11 parent flow. 



3. The method of claim 2, wherein the first protocol type 

is the Internet Control Message Protocol. 



1 4. The method of claim 2, wherein the second protocol type 

2 is the Transmission Control Protocol. 
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]W 5. The method of claim/2, wherein the first protocol type 

^2 is the Internet Control Messafge Protocol and the second protocol 
3 type is the Transmission Control Protocol. 
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